Migrate github.com/SermoDigital to github.com/golang-jwt for 1.27.0 c… - #3852

Open

benjaminguttmann-avtq wants to merge 2 commits into

cloudfoundry:mainfrom

benjaminguttmann-avtq:switch-sermodigital-jose-to-golang-jwt

GitHub Advanced Security / CodeQL failed Aug 26, 2026 in 4s

1 new alert including 1 high severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

1 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 13 in util/jwt/jwt.go

Code scanning / CodeQL

Missing JWT signature check High

This JWT is parsed without verification and received from

.